This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json)
Hash identifier: lArfSd+tKKvNeIFsiJxi2pS1Dy2nkslitkeIqtstoU8=
Subject key identifier: 71:FA:BD:2B:D3:3A:33:C1:D1:A1:6F:4C:1B:AE:13:3F:00:34:59:DA
Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84
Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
Certificate serial: 7B088D7DE7232A6B7738481CE3A2BEB9C9B2AD3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
Manifest number: 01D4
Signing time: Sat 06 Dec 2025 02:50:56 +0000
Manifest this update: Sat 06 Dec 2025 02:45:56 +0000
Manifest next update: Tue 09 Dec 2025 12:21:56 +0000
Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: /pxw+GQ2Y9XflTZiVCJW+6r6jI0Pb6lMeYivjcuLcC8=)
2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl
rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 12:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:08:8d:7d:e7:23:2a:6b:77:38:48:1c:e3:a2:be:b9:c9:b2:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
Validity
Not Before: Dec 6 02:45:56 2025 GMT
Not After : Dec 9 12:21:56 2025 GMT
Subject: CN=71FABD2BD33A33C1D1A16F4C1BAE133F003459DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:07:2f:5a:86:49:b2:ad:e3:c9:57:53:45:
e6:3c:b8:0e:7f:00:79:e6:91:4e:e9:9a:3a:5a:98:
1e:ea:24:fe:50:12:8b:af:d4:75:ae:ad:3f:fb:ac:
97:30:e2:f6:1e:93:56:30:68:0b:49:ee:3e:a8:80:
74:ef:5f:e4:ea:4a:08:8d:1e:2c:d4:5c:de:2b:ec:
30:41:12:96:ac:7f:1f:40:87:12:44:ea:d9:0b:4c:
65:19:5f:e1:f4:47:89:0d:5e:b7:89:c4:61:63:f3:
d8:61:00:7f:67:6a:f4:58:18:15:9a:19:15:bd:a3:
3f:c2:01:68:20:a5:da:97:8c:e5:66:7a:64:81:10:
48:ed:2a:58:7e:61:8e:32:8a:bd:90:f9:12:96:ec:
22:03:1d:92:34:5b:4f:49:43:f3:6c:e4:f3:2b:67:
c9:38:5f:41:8a:b4:fa:1f:d5:c4:4f:76:22:33:1d:
c2:32:e2:e4:c1:7b:4d:1f:d3:8b:78:85:66:d9:58:
ee:84:59:98:3f:bd:2d:0c:c8:1b:9b:ae:6f:a6:fd:
35:4b:fa:e7:55:bc:3d:b6:14:a7:4e:83:49:b6:dd:
5d:c7:6e:0d:46:b3:d9:65:8f:5d:fc:92:45:03:9e:
51:3d:79:88:01:9d:b6:ff:bc:97:81:3d:f2:29:07:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:BD:2B:D3:3A:33:C1:D1:A1:6F:4C:1B:AE:13:3F:00:34:59:DA
X509v3 Authority Key Identifier:
keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4f:4e:1f:35:e5:99:97:89:6c:ef:b8:f1:02:36:2d:75:df:
59:58:aa:7f:3d:ae:a7:3c:6d:96:02:3d:08:eb:ea:ab:f0:68:
e4:82:23:12:a2:be:68:fc:af:13:35:a3:d2:bd:72:4a:a0:d7:
fc:95:a9:43:8a:54:7e:dc:49:2e:4b:7c:7a:58:2e:f8:e8:fe:
d0:d4:0b:35:ec:f1:70:66:cf:90:09:89:ee:5c:89:5f:2f:d8:
92:76:d1:74:c4:b4:c2:f6:e0:03:76:0c:af:71:ae:a4:48:ee:
02:b9:c5:65:9f:a8:69:16:1f:1b:f7:3b:08:3e:d4:86:5d:c7:
75:b6:ae:37:54:2d:8f:ac:93:78:0e:d0:f8:bf:46:4c:ef:c3:
88:fa:ea:68:4e:47:9f:30:31:ca:98:21:76:74:5c:f4:55:44:
8c:22:1b:27:3c:1e:87:4c:e5:bf:dc:c1:d0:51:de:bc:8b:d5:
05:d9:d3:cb:31:51:25:11:0d:0e:8a:fc:1d:a9:1e:da:77:6c:
89:b0:bb:a4:5a:1b:8b:b2:11:ed:5a:99:4b:62:53:ac:9d:c8:
50:dc:fd:b1:41:cc:7b:15:b8:bb:0d:64:83:77:d3:b3:92:6d:
5a:63:db:b4:6d:03:dc:57:bc:aa:ad:cb:4b:6b:f6:ec:08:84:
9f:65:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:00 2025 by rpki-client